Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Learn AWS > AWS EFS and FSx > Flashcards

AWS EFS and FSx Flashcards

1
Q

I have a Windows EC2 instance, I need to connect to an EFS share, is this possible?

A

No EFS uses only the NFS protocol, no support for SMB for windows, but a separate service called FSx supports SMB for windows.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are EFS and FSx?

A

Elastic File System and FSx is an SMB shared file system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What protocols are available in EFS?

A

NFS, SMB is not supported but a separate service called SFx supports SMB for windows.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

With EFS do you provision storage upfront like EBS?

A

No, you only pay for what you use, much like S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

I have to store some files, what is the cost difference between EBS, EFS or S3?

A

EFS is 3 times more expensive than EBS and 20 times more expensive than s3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

I currently have a single server as an NFS file store, this is in a single AZ, what options do I have to make it highly available?

A

You can use EFS, as EFS data is across multiple AZ’s and scales and you pay for storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

I want to ensure my application can connect to EFS to access data if an AZ was to fail, what options do I have?

A

Create mount-points in multiple AZ’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Should i use over the internet to connect to EFS?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is EFS file sync agent?

A

It is an agent thet wil sit on a VM/Physical or Instance and sync your data with EFS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can I snapshot EFS?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Is EFS data stored across AZ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can I store GB or even PB in EFS?

A

Yes EFS is good for PB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

When should I use EFS over Object?

A

strong consistency

file locking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do I take a backup of EFS?

A

Using AWS Backup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When creating a VPC, where do you place the endpoint?

A

In a VPC in one or more subnets across multipal AZ’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

I have a separate account and I want to share my EFS, how can this be possible?

A

You will create a VPC in the external account and peer to the vPC with the EFS endpoint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

I have an EFS with an endpoint in my VPC, how can I connect from on-premise?

A

You create a VPN or direct connection and access the endpoint vis the VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

In what VPC subnet in the VPC will the EFS endpoint be created?

A

You select the subnet in a AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

I want to ensure high availability of the application using EFS, how should I arrange the endpoints?

A

Multiple EP across AZ’s in respective subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

I need to ensure thta EFS has available r/w preformance at all times what is nmy bets option?

A

Chose to use provisioned through put over burst

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Is data encrypted at reast by default?

A

No, you have to enable it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What storage classes are available with EFS?

A

S3 standard

Infrequent access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

I wnat to ensure data in EFS is at the lowest cost posisble, this data is not accessed tow often, what is my best option?

A

Enable life cycle managment, data will be moved to IA S3 storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How dose EFS scale?

A

EFS is a service not a server, unconstranted number of storage servcers, unlike triditional approch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How much through put can you get form EFS?

A

It scvales as the file system grows, 50MB per TB

26
Q

What is bursting and provisioned through put?

A

If you wnat to select the through put indepnadnt of the storage size as you get 50mbs per TC.

27
Q

How can I control who has permisison to access folders/directories oin the EFS files system?

A

Whet the EFS file system is created, the only user thet has access is the root user, he/she can then set th epermissions of any folder/dire in the file system.

28
Q

How do I secure access to EFS?

A

You secure IAM?

29
Q

How do you pay for EFS?

A

You pay for storage, cost is way higher then S3, about 10 times, you for each GB stored. You also pay for provisioned through put. If you are using S3-IA then you pay less then if stored in S3.

30
Q

When lifecycle managmen t is enabled in EFS, when i sdat automaticaly moved?

A

after 30 days it is moved to S3-IA.

31
Q

When I use EFS life cycle managemnt to move data to S3-IA, iks there anything i need to be concerned about/

A

First byte data read from S3-IA will have higher latency.

32
Q

How do I copy data from on-prem to EFS?

A

Datasync

Copy over direct conect or VPN

33
Q

Can I copy EFS data between regions?

A

No.

34
Q

How cna I access EFS form on-prem?

A

Over VPN or DirectConenct.

35
Q

I wnat ot shift large number of small files to EFS, what is my bets option to do it with out using any other tooling or services, only native protocal?

A

Parrell the copy of files.

36
Q

I wnat to copy large amount of dat to EFS, what are my options?

A

Use DataSync as it is 5x faster then copying using linux tooling.

37
Q

Where does EFS live, in or outside a VPC?

A

Inside a VPC, you select a VPC during creation, the targets are created inside the VPC subnets in each AZ.

38
Q

Where are targets created for EFS?

A

They have created inside a VPC subnets in each AZ, you select the AZ and subnets you wnat.

39
Q

I have an application that used shared storage (NFS), there is only one instance of my application running in a single VPC AZ and subnet, in the event of a failure the application automatically fails over to another AZ and subnet, what do I need to do for my shared storage?

A

You need to configure two targets during creation, one target in each of the availability zones and subnets so when the application fails over it is able to use the target in the other AZ.

40
Q

I wnat to secure my EFS in my VPC, what is the best option available?

A

I can use security groups associated with the EFS targets in the VPC subnets/ AZs. This allows me to have a separate security group for my target or you can even share an existing security group.

41
Q

My organization requires that all data in transit and at rest is encrypted, how can I meet this requirement from EFS?

A

EFS enables you to select if the EFS volume is encrypted you can select a KMS master key.

42
Q

Is EFS metadata (files names, etc) encrypted at rest?

A

Yes, the metadata is seperate from the file data and by default, EFS encrypts automatically all metadata.

43
Q

Is EFS file data encrypted by default?

A

No, you have to select it in the config and select a KMS key to use, you can create a KMS key or use the default managed key form =AWS for EFS service.

44
Q

My organization requires that all data in transit and at rest is encrypted, how can I enable in transit encryption on EFS?

A

You can not do it in the EFS service but it is enabled when the client connect on the client side.

45
Q

I have an EFS deployed with its own security group and no ports allowed, I also have an instance in the same VPC/AZ and subnet and this instance has its own security group with no ports open. I wnat to connect from my instances to the EFS, what do I need to do?

A

Both security groups will block traffic between the instance and the EFS mount target in the subnet. You have to open ports in both security groups.

46
Q

Where do I control the permission on the EFS volume file system?

A

From the Linux OS, the root user gets full access, you cna use the Linux command line to set permissions.

47
Q

Where are permissions controlled for EFS?

A
  • From access to the EFS service, they are controlled form AWS IAM.
  • From an EFS file system perspective, they are controlled from the Linux OS and initially by the root user.
48
Q

I wnat to backup my EFS files systems, what options do I have?

A

You cna use AWS Backup.

49
Q

Is dat synchronous replicated across availability zones/

A

Yes

50
Q

What is EFS food for?

A
  • Big Data
  • Analytics
  • Web hosting (Wordpress)
51
Q

I require static web content on a global scale, should I use EFS?

A

No, as S3 is a better option as it is lower cost, scales and also can be an origin for CloudFront.

52
Q

What is FSx used for?

A

It is for creating thirdpasty file systems like SMB and Luster

53
Q

I need to provision shared file storage for my windows instances, what are my best options?

A

You can use FSx to create an SMB shared file system and connect you windows file shared to it.

54
Q

I need to provision a LUSTER files system what AWS service should I use?

A

You can use the FXs as it supports both SMB (Windows) and LUSTER(HPC)

55
Q

What would I use FSx-LUSTER for?

A
  • Media
  • ML
  • Predictive analytics
56
Q

For FXs, do I pay for what I use or is it pay up front?

A

You have to select the storage capacity size upfront, pay as you use is not an option.

57
Q

I am using FSx and I need I availability for my application, how can I use FXx -SMB to solve my availability issues?

A

You cant, FSx is only available in a single availability zone.

58
Q

How cna I secure my AWS-SMB targets for other network instances in any subnets?

A

When creating the FSx-SMB you select a security group to act as a firewall.

59
Q

I am using FSx-SMB how cna I encrypt my file system, do I need third party software?

A

No, by default your files system is encrypted using an AWS managed key (KMS)

60
Q

I am using FSx-SMB, can I manage my own FSx encryption keys?

A

Yes, you cna use your own KMS managed keys (customer keys).

61
Q

I need to create an AWS FSx-SMB, are their other services I need to have in place before creating the FSx share?

A

Yes, you need a working active directory in the VPC, FSx will use this AD for access control.

Learn AWS (90 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions